RPKI Certificate
Location:                 rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HL0GV17DRZCwhtA3Q9BQ2rcKNjg.cer (download)

Subject key identifier:   1C:BD:06:57:5E:C3:45:90:B0:86:D0:37:43:D0:50:DA:B7:0A:36:38
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Manifest:                 rpki.apnic.net/member_repository/A91BDE77/834B4C126B6011E780B8E11CC4F9AE02/HL0GV17DRZCwhtA3Q9BQ2rcKNjg.mft
CA Repository:            rpki.apnic.net/member_repository/A91BDE77/834B4C126B6011E780B8E11CC4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subordinate resources:
    1: IP: 147.158.0.0/16

--
$ openssl x509 -text -inform DER -in rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HL0GV17DRZCwhtA3Q9BQ2rcKNjg.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15593 (0x3ce9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Sep 13 02:28:12 2021 GMT
            Not After : Oct 31 00:00:00 2022 GMT
        Subject: CN=A91BDE77/serialNumber=1CBD06575EC34590B086D03743D050DAB70A3638
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a8:2c:e1:aa:66:02:e5:ec:18:54:c8:4c:11:
                    c0:da:e4:b5:c9:e3:67:01:1b:e2:7f:14:ba:fc:43:
                    f1:00:68:a1:36:51:5e:98:3b:51:ed:87:04:a4:c6:
                    85:a3:d1:bb:0a:b2:6a:a7:4e:c9:24:40:05:f3:48:
                    ca:72:2e:51:b0:0a:7f:30:21:d9:80:92:f9:49:22:
                    0f:51:e1:39:cd:cf:76:3d:15:04:2d:d1:dd:25:a2:
                    48:41:17:da:66:04:64:9b:84:92:87:a4:ca:9d:79:
                    3a:dc:0f:84:fe:bb:72:1d:84:8e:e3:ee:0c:5f:e0:
                    90:4a:fd:5d:56:63:a3:01:40:92:14:b8:f6:6b:6f:
                    19:70:3e:85:f9:9d:10:d7:44:35:83:04:49:8d:c8:
                    c3:23:f8:7b:22:66:17:07:87:3e:17:68:a4:3f:13:
                    ab:2b:02:b7:81:17:c8:35:df:0f:f9:fa:6d:10:45:
                    f4:cb:be:65:74:52:74:aa:a4:f3:76:03:1c:a6:af:
                    f6:05:0d:79:44:af:d5:21:50:7f:9d:fe:63:bb:1d:
                    f0:2d:9e:3b:de:6b:83:81:b0:73:b8:49:b3:03:12:
                    24:cb:29:37:ab:83:1e:45:29:6c:53:90:fa:65:6e:
                    fd:e1:d6:a5:e7:81:a1:c9:4b:e8:12:98:f0:65:a8:
                    8a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                1C:BD:06:57:5E:C3:45:90:B0:86:D0:37:43:D0:50:DA:B7:0A:36:38
            X509v3 Authority Key Identifier: 
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91BDE77/834B4C126B6011E780B8E11CC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91BDE77/834B4C126B6011E780B8E11CC4F9AE02/HL0GV17DRZCwhtA3Q9BQ2rcKNjg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.158.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         90:83:00:ae:6a:70:ee:49:fc:99:a4:2d:71:4c:54:73:f3:4e:
         0c:ca:42:bb:04:d4:b8:24:18:0e:39:de:4f:be:4d:bc:08:59:
         bb:ca:25:2a:39:6c:b7:48:dd:e9:95:1a:8e:12:ed:4d:e3:8c:
         92:af:ac:0f:e1:50:6e:86:ef:d5:47:22:54:36:ec:5e:b1:f6:
         dd:4c:95:9b:24:7a:09:96:ce:5a:27:6f:52:10:24:13:1e:c0:
         ba:87:ef:67:dd:ee:92:96:00:83:b8:a2:5f:f9:9f:a3:f4:fb:
         4b:48:e1:4c:33:ef:82:5f:4d:d3:1d:02:90:f0:77:db:9c:b1:
         48:6c:f5:a2:ab:5b:15:58:13:0a:47:26:c1:da:7c:c7:b4:de:
         1b:4c:3f:2f:c7:6b:7c:48:7f:ad:b4:b5:95:bb:00:f8:76:12:
         b7:c0:e4:e8:20:e4:70:f1:18:6a:67:3c:a7:51:33:09:8e:17:
         19:6a:11:26:34:4c:7f:e1:75:3f:56:2f:76:59:60:d4:b0:f6:
         0a:64:cd:60:1a:d4:d7:f4:4f:a5:c9:0d:44:b9:80:c6:c8:b6:
         a5:89:49:79:28:24:55:fa:f8:26:8d:77:71:52:fe:c5:fc:59:
         9e:10:4d:33:80:ec:37:71:b0:2b:34:e6:06:11:60:a1:85:e2:
         57:54:45:ff
-----BEGIN CERTIFICATE-----
MIIF/DCCBOSgAwIBAgICPOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjEwOTEzMDIyODEyWhcNMjIxMDMxMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTFCREU3NzExMC8GA1UEBRMoMUNCRDA2NTc1RUMzNDU5MEIwODZEMDM3
NDNEMDUwREFCNzBBMzYzODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
ALuoLOGqZgLl7BhUyEwRwNrktcnjZwEb4n8UuvxD8QBooTZRXpg7Ue2HBKTGhaPR
uwqyaqdOySRABfNIynIuUbAKfzAh2YCS+UkiD1HhOc3Pdj0VBC3R3SWiSEEX2mYE
ZJuEkoekyp15OtwPhP67ch2EjuPuDF/gkEr9XVZjowFAkhS49mtvGXA+hfmdENdE
NYMESY3IwyP4eyJmFweHPhdopD8TqysCt4EXyDXfD/n6bRBF9Mu+ZXRSdKqk83YD
HKav9gUNeUSv1SFQf53+Y7sd8C2eO95rg4Gwc7hJswMSJMspN6uDHkUpbFOQ+mVu
/eHWpeeBoclL6BKY8GWoijcCAwEAAaOCAvIwggLuMB0GA1UdDgQWBBQcvQZXXsNF
kLCG0DdD0FDatwo2ODAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QkRFNzcvODM0QjRDMTI2QjYwMTFFNzgwQjhFMTFDQzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUJERTc3LzgzNEI0QzEyNkI2MDExRTc4MEI4RTExQ0M0RjlBRTAyL0hMMEdWMTdE
UlpDd2h0QTNROUJRMnJjS05qZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAeBggrBgEFBQcBBwEB/wQPMA0w
CwQCAAEwBQMDAJOeMA0GCSqGSIb3DQEBCwUAA4IBAQCQgwCuanDuSfyZpC1xTFRz
804MykK7BNS4JBgOOd5Pvk28CFm7yiUqOWy3SN3plRqOEu1N44ySr6wP4VBuhu/V
RyJUNuxesfbdTJWbJHoJls5aJ29SECQTHsC6h+9n3e6SlgCDuKJf+Z+j9PtLSOFM
M++CX03THQKQ8HfbnLFIbPWiq1sVWBMKRybB2nzHtN4bTD8vx2t8SH+ttLWVuwD4
dhK3wOToIORw8RhqZzynUTMJjhcZahEmNEx/4XU/Vi92WWDUsPYKZM1gGtTX9E+l
yQ1EuYDGyLaliUl5KCRV+vgmjXdxUv7F/FmeEE0zgOw3cbArNOYGEWChheJXVEX/
-----END CERTIFICATE-----

Generated at Sun Sep 26 12:49:59 2021 by LibreSSL & rpki-client.